CVE-2026-10667 | zephyrproject zephyr up to 4.4.x Dynamic Kernel Object Tracking userspace.c k_object_wordlist_foreach use after free

July 12, 2026 Yanac

A vulnerability was found in zephyrproject zephyr up to 4.4.x and classified as very critical. The affected element is the function k_object_wordlist_foreach of the file kernel/userspace/userspace.c of the component Dynamic Kernel Object Tracking. Executing a manipulation can lead to use after free.

This vulnerability appears as CVE-2026-10667. The attack requires local access. There is no available exploit.VulDB Recent EntriesRead More